$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft File: fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft (raw, json) Hash identifier: FpzvXv3pwtM322OgRwH3H0XahOKU8Kfj3sm0mLbmmnY= Subject key identifier: C3:28:C5:4F:F4:12:65:9D:3E:B2:52:7B:19:93:0D:FD:09:F0:BF:9E Authority key identifier: 7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F Certificate issuer: /CN=A9170AF9/serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F Certificate serial: 0658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft Manifest number: 0653 Signing time: Tue 04 Nov 2025 22:43:20 +0000 Manifest this update: Tue 04 Nov 2025 22:43:20 +0000 Manifest next update: Tue 11 Nov 2025 22:43:20 +0000 Files and hashes: 1: fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl (hash: +FQukdGfwCszRVo9qD4YGAMRXGsIpVsQ/VgZcMFbVpI=) 2: 98212A1EA7F011EB816C331FC4F9AE02.roa (hash: OhXdNxeZYZKsEh/kQY88PZgh8U46VN9OPBnD0qrSgNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170AF9, serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F Validity Not Before: Nov 4 22:43:20 2025 GMT Not After : Nov 11 22:43:20 2025 GMT Subject: CN=690a8188-396d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:3c:0f:b9:80:2c:e8:da:ba:5b:b1:5d:f2: 63:a9:8a:3f:50:8d:e9:f0:57:5a:61:b5:8d:e4:79: 45:d8:6c:83:9a:14:d7:e2:9c:3f:64:34:19:00:61: 74:21:83:16:af:0d:b7:c7:a1:51:69:7d:e4:b7:b8: ec:10:cc:cd:d3:ab:35:db:8e:92:f3:a9:22:b5:a1: 69:0d:a4:41:7c:7e:87:07:05:cf:ef:41:61:3d:56: 45:b4:ef:d2:8d:d1:42:15:77:49:c4:9e:09:36:87: 98:3b:13:8c:ec:88:bf:df:7a:60:cb:b6:64:a1:25: 8d:c3:21:d4:cc:16:0a:21:1e:a1:3c:69:df:b9:ec: f6:7d:30:03:13:cc:c6:a4:03:78:39:a0:90:34:11: 37:49:6f:9e:c7:b1:bd:08:f2:d3:3b:19:24:e5:a6: be:d5:a8:c7:5a:7f:bf:11:a5:67:dd:2a:52:72:56: 0c:8e:49:1d:e9:b9:5b:ed:e8:37:3c:98:e8:f5:14: 44:85:86:bb:ee:1e:4d:45:3b:fa:45:3d:66:5a:e5: 79:77:b2:de:21:e8:31:05:80:49:95:0a:64:b7:91: 02:28:23:55:06:f4:9d:42:98:d1:f8:cc:d9:81:f9: 29:8a:ae:7b:1b:24:27:8d:8f:9b:32:dc:19:7c:17: ff:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:28:C5:4F:F4:12:65:9D:3E:B2:52:7B:19:93:0D:FD:09:F0:BF:9E X509v3 Authority Key Identifier: keyid:7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:76:5c:1b:bd:70:aa:e7:31:59:35:82:74:e9:75:f1:da:66: 6d:bf:d4:14:30:19:42:48:63:2a:b9:12:80:95:f1:7b:87:b5: 89:ac:f1:05:01:16:3f:be:f2:6f:10:bc:a4:94:42:d5:33:07: 41:27:b7:c3:c5:9c:e4:ba:83:5a:d7:8c:4e:e0:41:b5:e2:67: d1:7a:60:75:d8:ce:74:50:01:e1:d0:14:2d:4a:ed:ef:2c:92: c5:8a:60:63:2e:cc:ab:89:e0:ac:e3:38:15:ed:36:38:70:a3: cb:2e:a0:c5:bc:07:82:7a:a0:c8:3f:41:a9:d5:32:12:53:8c: af:1e:44:70:89:d1:a2:4b:a7:04:5f:3e:6c:61:a4:28:c5:56: 7b:7f:a4:f3:b8:32:d3:04:1b:e0:57:8a:db:2f:8f:e8:24:49: 79:e7:db:f7:6e:a4:b4:e3:67:87:39:ee:22:1c:3e:a0:da:28: f7:0c:31:40:a9:38:f4:e3:f3:f4:ac:b2:03:f0:c6:17:aa:2e: 93:2f:ea:2f:76:1f:b0:df:c8:22:f0:7f:f1:46:55:08:26:3e: 23:cb:b9:b5:04:a8:c6:aa:4b:39:c0:00:47:e5:15:85:33:3a: 15:34:18:b2:d9:0b:fb:b1:77:c9:f4:7e:6b:aa:32:b4:fa:3a: 53:6f:fe:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBBRjkxMTAvBgNVBAUTKDdFRTNCODhGQjFBRjBEOTJEQkQyMTY2MTI1RkIwOUNC MjRGMTA4M0YwHhcNMjUxMTA0MjI0MzIwWhcNMjUxMTExMjI0MzIwWjAYMRYwFAYD VQQDEw02OTBhODE4OC0zOTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt408D7mALOjauluxXfJjqYo/UI3p8FdaYbWN5HlF2GyDmhTX4pw/ZDQZAGF0 IYMWrw23x6FRaX3kt7jsEMzN06s1246S86kitaFpDaRBfH6HBwXP70FhPVZFtO/S jdFCFXdJxJ4JNoeYOxOM7Ii/33pgy7ZkoSWNwyHUzBYKIR6hPGnfuez2fTADE8zG pAN4OaCQNBE3SW+ex7G9CPLTOxkk5aa+1ajHWn+/EaVn3SpSclYMjkkd6blb7eg3 PJjo9RREhYa77h5NRTv6RT1mWuV5d7LeIegxBYBJlQpkt5ECKCNVBvSdQpjR+MzZ gfkpiq57GyQnjY+bMtwZfBf/9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMoxU/0 EmWdPrJSexmTDf0J8L+eMB8GA1UdIwQYMBaAFH7juI+xrw2S29IWYSX7Ccsk8Qg/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFGOS8yOUNEQ0Q4RUE3 RUYxMUVCQjEyREE0MUVDNEY5QUUwMi9mdU80ajdHdkRaTGIwaFpoSmZzSnl5VHhD RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1TzRqN0d2RFpMYjBoWmhKZnNKeXlUeENEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEFGOS8yOUNEQ0Q4RUE3RUYxMUVCQjEyREE0MUVDNEY5QUUwMi9mdU80ajdHdkRa TGIwaFpoSmZzSnl5VHhDRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwdlwbvXCq5zFZNYJ06XXx2mZtv9QUMBlCSGMquRKAlfF7h7WJrPEF ARY/vvJvELyklELVMwdBJ7fDxZzkuoNa14xO4EG14mfRemB12M50UAHh0BQtSu3v LJLFimBjLsyrieCs4zgV7TY4cKPLLqDFvAeCeqDIP0Gp1TISU4yvHkRwidGiS6cE Xz5sYaQoxVZ7f6TzuDLTBBvgV4rbL4/oJEl559v3bqS042eHOe4iHD6g2ij3DDFA qTj04/P0rLID8MYXqi6TL+ovdh+w38gi8H/xRlUIJj4jy7m1BKjGqks5wABH5RWF MzoVNBiy2Qv7sXfJ9H5rqjK0+jpTb/6P -----END CERTIFICATE-----Generated at Wed Nov 5 08:02:33 2025 by rpki-client